implement-saaskit-nextjs
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill directs the installation of the
@scalekit-sdk/nodepackage, which is the official SDK for the vendor's platform. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data from URL search parameters. Ingestion point: The
nextparameter inapp/auth/login/route.tsandapp/auth/callback/route.ts. Boundary markers: The instructions include logic to verify redirect destinations. Capability inventory: The skill usesNextResponse.redirectand calls the Scalekit SDK to initiate authentication. Sanitization: The implementation includes a check to ensure thenextparameter starts with a single/and not//, preventing Open Redirect attacks. - [COMMAND_EXECUTION]: The skill involves executing package installation commands for dependencies required by the authentication implementation.
Audit Metadata